BaselineWatch
Desk

CVE-2021-40158

7.8 high SSVC exploitation: none Modified

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Fix

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.8 · autodeskNVD modified 2026-10-08 21:17

Affected (CPE criteria) 14

  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:inventor:2019:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:inventor:2020:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:inventor:2021:*:*:*:*:*:*:*

References 44